Homepage

agno@3.1.5

The programming language for agentic software.

  • latest version

    3.1.10

  • first published

    1 years ago

  • latest version published

    8 hours ago

  • licenses detected

  • View agno package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the agno package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Missing Authentication for Critical Function

    agno is an Agno: a lightweight library for building Multi-Agent Systems

    Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the get_authentication_dependency function in auth.py, where manipulation of the security_key argument allows an attacker to bypass authentication entirely. A remote, unauthenticated attacker can exploit this to gain unauthorized access, potentially reading, modifying, or disrupting protected resources.

    How to fix Missing Authentication for Critical Function?

    There is no fixed version for agno.

    [0,)
    • M
    Arbitrary Code Injection

    agno is an Agno: a lightweight library for building Multi-Agent Systems

    Affected versions of this package are vulnerable to Arbitrary Code Injection via the run_python_code function in python.py of the PythonTools component, where the code argument is passed without sufficient validation, allowing a remote attacker with low privileges to inject and execute arbitrary Python code.

    How to fix Arbitrary Code Injection?

    There is no fixed version for agno.

    [0,)
    • M
    Execution with Unnecessary Privileges

    agno is an Agno: a lightweight library for building Multi-Agent Systems

    Affected versions of this package are vulnerable to Execution with Unnecessary Privileges via the member_agent.run function in libs/agno/agno/team/_default_tools.py, within the Delegation Feature. An authenticated remote attacker can manipulate the delegation mechanism to cause agent tasks to execute with privileges beyond those required, potentially allowing unauthorized actions within the agent team context.

    How to fix Execution with Unnecessary Privileges?

    There is no fixed version for agno.

    [0,)
    • M
    Improper Control of Dynamically-Managed Code Resources

    agno is an Agno: a lightweight library for building Multi-Agent Systems

    Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via run_python_code in PythonTools, which executes model-generated Python using exec() with full builtins, imports, filesystem, and network access. Despite their names, safe_globals and safe_locals impose no security boundary - they merely seed the execution namespace and do not restrict what the executed code can import or access. Similarly, restrict_to_base_dir constrains only file-path arguments to the file helpers and does nothing to prevent executed code from reading arbitrary files such as /etc/passwd, dumping os.environ, or making network connections. An attacker who can influence the model's input (for example via prompt injection) can achieve arbitrary code execution in the host process.

    How to fix Improper Control of Dynamically-Managed Code Resources?

    There is no fixed version for agno.

    [0,)
    Go back to all versions of this package